← Back to Home

Privacy Policy

Last updated: August 2026

1. Introduction

AIAgencies.eu (“we”, “our”, or “us”) protects your privacy by design: your data stays in the EU where possible, we run no third-party analytics trackers and no ad trackers, and our own measurement is a cookieless counter that works with aggregates, not profiles.

The data controller responsible for your personal data is Kiss Gábor László e.v., Mikszáth Kálmán u. 17. 1./1., Kazincbarcika, Hungary (EU VAT HU59417398), reachable at hello@aiagencies.eu. Full business details are on our contact page.

2. Information We Collect

  • Form data: Name, email address, and the details you provide when submitting an agency, claiming a profile, contacting an agency, requesting a match, or contacting us.
  • Account data: If you create an account (agency or buyer), your email address, role, and profile details. Passwords are stored only as cryptographic hashes managed by our authentication provider — we never see them.
  • Agency data: Business information for listings — company name, location, services, team size, rates, published case studies.
  • First-party usage aggregates: Page path, referrer, a whitelist of campaign (utm) parameters, and country, counted per day. No cookies, no device fingerprints, no cross-site identifiers, no user profiles.
  • Publicly sourced business information: Directory profiles may include information about agencies and individuals associated with them (such as founders or named references) compiled from publicly available sources. Where this concerns an identifiable person, we process it on the basis of our legitimate interest in operating an informational business directory; anyone named may contact us to object or request changes, and we will review promptly.

3. How We Use Your Information

  • Operate and maintain the directory and its accounts
  • Process agency submissions, reviews, and profile claims
  • Relay buyer inquiries to agencies, and deliver curator shortlists and saved-criteria alerts you request
  • Process payments for Pro subscriptions (which include the expedited verified review)
  • Send transactional email (confirmations, review outcomes, lead notifications)
  • Measure site usage in aggregate and fix errors

4. Legal Basis for Processing

  • Contract: Account management, listing reviews you order, paid services, and delivering features you sign up for.
  • Consent: Form submissions, alert subscriptions, and any non-essential cookies (set only after consent via the cookie banner). Withdraw anytime by contacting us or via your account.
  • Legitimate interest: Operating the public directory, cookieless aggregate measurement, fraud and spam prevention, and short-term error logs.

5. Processors and Transfers

We use these providers to operate the website; each processes data on our behalf under a data processing agreement:

  • Supabase — database and authentication. Our project runs in the EU (Frankfurt, Germany), so listing, account, lead, and usage data resides in the EU.
  • Vercel Inc. (USA) — website hosting and deployment.
  • Stripe — payment processing and invoicing for paid services. We never store card details ourselves.
  • Resend — transactional email delivery.
  • CookieYes — cookie consent management.

No third-party analytics.We run no Google Analytics, no session replay, and no advertising trackers. Search performance is measured through search engines' own webmaster consoles, which report to us in aggregate and receive no visitor data from this site.

International transfers.Where a provider processes data outside the EU/EEA (Vercel, Stripe, Resend), we rely on the EU–U.S. Data Privacy Framework for certified providers and/or the European Commission’s Standard Contractual Clauses.

We do not sell your personal information. Agency listings are publicly visible by design.

6. Data Retention

  • Form submissions and leads: Deleted 2 years after they are submitted. An automated daily job enforces this.
  • Accounts: Until you delete the account or ask us to; residual billing records are kept as long as tax law requires.
  • Agency listings: Until removal is requested by an authorized representative (see the takedown process in the terms).
  • Usage aggregates: Daily counters contain no personal identifiers and are kept indefinitely as statistics.
  • Server error logs: Deleted after 90 days.

7. Your Rights

Under GDPR, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Object to processing, including processing based on legitimate interest
  • Data portability
  • Withdraw consent at any time, without affecting prior processing
  • Lodge a complaint with a supervisory authority — in Hungary, the NAIH (naih.hu), or the authority of your own country

8. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us. We respond to data-rights requests within 30 days.